Method and program for supporting setting of access management information

ABSTRACT

In order to limit host computers permitted to control a storage area from host computers, provided is a storage management computer coupled to one or more host computers for providing services and one or more storage systems, in which the storage management computer judges whether the host computer is permitted to control the storage area based on data indicating the configuration information of the storage system and service management information for managing the services provided by the host computers, and in case of which it is judged that the host computer is permitted to control the storage area, the storage management computer sets access control data to permit the host computer to control the storage area.

CLAIM OF PRIORITY

The present application claims priority from Japanese patent application2006-283706 filed on Oct. 18, 2006 now U.S. Pat. No. 8,086,733, and is acontinuation application of U.S. application Ser. No. 11/614,607, filedDec. 21, 2006, the contents of which are hereby incorporated byreference into this application.

BACKGROUND

This invention relates to a computer system having a storage system, andmore specifically, to a computer system for setting a table for managinga computer which permits operations to a storage area of the storagesystem.

Conventionally, there have been widely spread computer systems having aplurality of computers connected with a plurality of storage systems viaa communication line (storage area network (SAN)), in which the highlyreliable storage systems having high performance are shared by theplurality of computers.

As a function of security of the storage system, there is a function oflimiting computers permitted to input/output data to/from a plurality ofstorage areas provided in the storage system as disclosed in JP10-333839 A, for example.

The storage system creates a pair between the storage area provided inthe storage system and a storage area other than this storage area. Itbecomes possible to duplicate data stored in a certain storage area tothe other storage area composing the pair by creating the pair. Itshould be noted that as statuses of the pair, there are a synchronizedstate, suspended state, and the like. When the pair is synchronized,data stored in the original storage area is duplicated to the storagearea of destination. When the pair is suspended, the data of theoriginal storage area is not synchronized with that of the storage areaof destination. Then, in a state where the pair is suspended, datastored in a storage area of a disk unit at a certain point of time isstored in a storage area composing the pair with that storage area, anddata stored on and after that point is not reflected in the storage areaof the destination. The pair is used for backing up data online, forexample. The two storage areas composing the pair may be those providedin the same storage system or may be those provided in different storagesystems, respectively.

There has also been a technique of storing electronic data in a storagesystem without archiving to a tape when a volume of the electronic dataincreases. The storage system is provided with a function of inhibitingwriting to its storage area (function of changing attributes of thestorage area) in order to store the data safely.

The computer connected with the storage system via the SAN controls thestorage area set in the storage system. Controls carried out to thestorage area by the computer include operations of changing the statusof the pair, of inhibiting writing to the storage area, and the like.The storage system controls the storage area by inputting/outputtingdata to/from a special storage area by the computer as disclosed in JP2000-112666 A, for example. It should be noted that this special storagearea is called as a command device.

Similarly to the normal storage area, the command device limitscomputers for inputting/outputting data to/from the command device by anLUN Security function. Storage area operation requests from the computerinclude requests of changing the status of the pair, changing attributesof the storage area, and the like.

In recent years, there has been tried an introduction of an idea ofbusiness into management of operation of a computer system. In thismanagement of operation, a relationship between services provided by thecomputer system and resources provided in the computer system such as acomputer, a storage system, a network device, an application, database,and the like is defined in advance. Then, when a certain resource causesa failure, information indicating which service may be affected by thefailure is displayed on an event monitoring console as disclosed in JP2005-31893 A, for example.

SUMMARY

The computer system is composed of the plurality of computers and theplurality of storage systems, and provides services. Computers permittedto control the storage area are limited to computers that provide thesame service. Accordingly, it becomes possible to prevent computers notrelated to the service from control the storage area. Thus, security ofthe service can be enhanced.

However, an administrator has to manage a computer that permits tocontrol the storage area in addition to the configuration of the storagesystem, in order to limit the computers permitted to control the storagearea to the computers providing the same service.

According to an aspect of this invention, there is provided a computersystem comprising at least one host computer for providing services, atleast one storage system coupled to the host computer, and a managementcomputer, in which: the host computer has a first processor for carryingout arithmetic operations, a first memory connected to the firstprocessor, and a first interface connected to the first processor; thefirst memory storing programs for providing service; the host computerprovides the services by executing the programs and accesses to astorage area provided by the storage system via the first interface anda second interface provided in the storage system to control a storagearea of the storage system; the storage system has a second processorfor carrying out arithmetic operations, a second memory connected to thesecond processor, the storage area for storing data requested to beinputted and outputted from the host computer, and a second interfaceconnected to the second processor; the second memory stores accesscontrol data for managing the host computer permitted to control thestorage area; the management computer has a third processor for carryingout arithmetic operations, a third memory connected to the thirdprocessor, and a third interface connected to the third processor; thethird memory storing configuration information indicating theconfiguration of the storage system and service management informationfor managing services provided by the host computer; the third processorjudges whether the host computer is permitted to control the storagearea based on the configuration information and service managementinformation; and in case of which the third processor judges that thehost computer is permitted to control the storage area, the thirdprocessor sets the access control data to permit the host computer tocontrol the storage area via the second interface and the thirdinterface.

This invention allows the security of the computer system to be improvedwithout increasing cost for managing the storage system.

BRIEF DESCRIPTION OF THE DRAWINGS

The present invention can be appreciated by the description whichfollows in conjunction with the following figures, wherein:

FIG. 1 is a diagram showing a computer system according to a firstembodiment of this invention;

FIG. 2 is a diagram for explaining a memory provided in a servicemanagement computer according to the first embodiment of this invention;

FIG. 3 is a diagram for explaining a control memory provided in astorage system according to the first embodiment of this invention;

FIG. 4 is a diagram for explaining a memory provided in a storagemanagement computer according to the first embodiment of this invention;

FIG. 5 is a table showing a configuration of a service management tableaccording to the first embodiment of this invention;

FIG. 6 is a table showing a configuration of a storage area managementtable according to the first embodiment of this invention;

FIG. 7 is a table showing a configuration of a storage area allocationmanagement table according to the first embodiment of this invention;

FIG. 8 is a table showing a configuration of a pair management tableaccording to the first embodiment of this invention;

FIG. 9 is a table showing a configuration of a control computermanagement table according to the first embodiment of this invention;

FIG. 10 is a flowchart of processes of a data input/output programaccording to the first embodiment of this invention;

FIG. 11 is a diagram for explaining a storage area allocation GUIprovided by the storage management computer in allocating a storage areato the host computer according to the first embodiment of thisinvention;

FIG. 12 is a table showing a configuration of a storage systemmanagement table according to the first embodiment of this invention;

FIG. 13 is a table showing a configuration of a service managementcomputer management table according to the first embodiment of thisinvention;

FIG. 14 is a flowchart of processes of a control computer managementtable creating program according to the first embodiment of thisinvention;

FIG. 15 is a flowchart of processes of a storage area allocating programaccording to the first embodiment of this invention;

FIG. 16 is a flowchart of processes of a storage area unallocatingprogram according to the first embodiment of this invention;

FIG. 17 is a flowchart of processes of a command device allocatingprogram according to the first embodiment of this invention;

FIG. 18 is a flowchart of processes of a command device unallocatingprogram according to the first embodiment of this invention;

FIG. 19 is a flowchart of processes of a pair creating program accordingto the first embodiment of this invention;

FIG. 20 is a flowchart of processes of a pair deleting program accordingto the first embodiment of this invention;

FIG. 21 is a table showing a configuration of a computer role managementtable according to a second embodiment of this invention; and

FIG. 22 is a table showing a configuration of an access control tableaccording to the second embodiment of this invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS First Embodiment

A first embodiment of this invention will be explained by using FIGS. 1through 20.

FIG. 1 is a diagram showing a computer system according to the firstembodiment of this invention.

The computer system has host computers 200, a storage managementcomputer 300, a service management computer 500, a fiber channel switch100, and storage systems 400.

The host computers 200 are connected with the storage systems 400 viathe fiber channel switch 100. The host computers 200, the storagemanagement computer 300, the service management computer 500, and thestorage systems 400 are mutually connected via a network 10.

The fiber channel switch 100 has fiber channel interfaces 102 and anetwork interface 104. The host computers 200 are connected with thestorage systems 400 through the fiber channel interfaces 102. The fiberchannel switch 100 is also connected with the network 10 via the networkinterface 104.

Each of the host computers 200 has a processor unit, a memory, a diskunit, a display unit, a fiber channel interface 202, and a networkinterface 204. The processor unit further includes a processor (e.g.CPU, not shown). The processor executes various arithmetic operations.The host computer 200 is connected with the fiber channel switch 100through the fiber channel interface 202. The host computer 200 is alsoconnected with the network 10 through the network interface 204.

The host computer 200 executes applications that provide services. Thehost computer 200 also transmits a request for inputting/outputting datato the storage system 400.

The storage management computer 300 has a processor unit, a memory 306,a disk unit, a display unit, and an interface 304 for connecting withthe network 10. The processor unit has a processor (e.g. CPU, notshown). The processor executes various arithmetic operations. Thestorage management computer 300 manages the storage system 400 and theservice management computer 500. To be specific, the storage managementcomputer 300 manages accesses from the host computer 200 to the storagesystem 400.

The service management computer 500 has a processor unit, a memory 506,a disk unit, a display unit, and an interface 504 for connecting withthe network 10. The service management computer 500 manages servicesprovided by the computer system and the host computer 200 composing theservices.

The services may be those conducted within a company or those providedto clients, for example. The services conducted within the company maybe those of personnel management, calculation of salary, and ordering ofmaterials, for example. The services provided to the clients may bethose provided through Web system typified by Internet banking andInternet shopping, for example. It should be noted that the hostcomputer 200 is a computer for executing applications necessary forproviding the services.

The storage system 400 has a storage controller 420 and a disk unit 410.

The storage controller 420 has a processor 430, a control memory 440, anon-volatile memory 450, a cache memory 460, a first fiber channelinterface 470, a second fiber channel interface 480, and a networkinterface 490. It should be noted that these are connected with eachother.

The storage controller 420 is connected with the disk unit 410 via thesecond fiber channel interface 480. It should be noted that the secondfiber channel interface 480 may not be the fiber channel interface, andmay be an interface of ATA, serial ATA, parallel SCSI, serial SCSI, andthe like.

The disk unit 410 has a recording medium (not shown). The disk unit 410reads/writes data from/to the recording medium by receiving a request toinput/output data from the storage controller 420. The storagecontroller 420 transmits the request to input/output data to the diskunit 410 via the second fiber channel interface 480.

The storage controller 420 can control the disk unit 410 as RAID havingredundancy. Accordingly, reliability of the storage system 400 isimproved and performance of the storage system 400 is enhanced.

It should be noted that a single or a plurality of disk units 410 may beprovided in the storage system 400.

Physical or logical storage areas (volume of physical volume or logicalvolume, for example) are set in the disk unit 410. It should be notedthat this storage area is a physical or logical storage area. Thestorage area is uniquely identified within the storage system 400 by astorage area identifier.

The storage controller 420 is connected with the fiber channel switch100 via the first fiber channel interface 470.

The storage controller 420 receives the request to input/output datafrom the host computer 200 connected with the fiber channel switch 100via the first fiber channel interface 470.

The storage controller 420 is connected with the network 10 via thenetwork interface 490.

Speed of data transferred between the disk unit 410 and the storagecontroller 420 is slower than speed of data transferred within thestorage controller 420. Therefore, the storage controller 420 storesdata frequently accessed in the cache memory 460. Accordingly,performance of transferring data of the storage system 400 is improved.

The operation of the storage system 400 described above is realized whena program stored in the non-volatile memory 450 is loaded to the controlmemory 440, and the processor 430 executes the loaded program.

It should be noted that the storage controller 420 may be a singleprocessor or a multiple processor.

FIG. 2 is a diagram for explaining a memory 506 provided in the servicemanagement computer 500 according to the first embodiment of thisinvention.

A service management table 1100 is stored in the memory 506. The servicemanagement table 1100 is a table includes information for managingservices provided by the host computers 200 provided in the computersystem and the host computers 200 that provide the services. It shouldbe noted that the detail of the service management table 1100 will beexplained with reference to FIG. 5.

FIG. 3 is a diagram for explaining the control memory 440 provided inthe storage system 400 according to the first embodiment of thisinvention.

The control memory 440 stores a storage area management table 2050, astorage area allocation management table 2100, a pair management table2200, a control computer management table 2300, and a data input/outputprogram 8000.

The storage area management table 2050 includes information for managingattributes and the like of the storage areas set in the storage system400. It should be noted that the detail of the storage area managementtable 2050 will be explained with reference to FIG. 6.

The storage area allocation management table 2100 includes informationindicating whether the storage area accessible from the host computer isa storage area via that the storage area can be controlled (referred toas “command device” hereinafter). The command device is an area intowhich a command to control the storage area is written from the hostcomputer 200. Then, when a command is written into the command device,the storage system 400 controls the storage area designated by thewritten command. It should be noted that the detail of the storage areaallocation management table 2100 will be explained with reference toFIG. 7.

The pair management table 2200 includes information for managing storageareas composing the pair and status of the pair. It should be noted thatthe detail of the pair management table 2200 will be explained withreference to FIG. 8.

The control computer management table 2300 includes information formanaging the storage area which is able to be controlled by the hostcomputer 200 via the command device. It should be noted that the detailof the control computer management table 2300 will be explained withreference to FIG. 9.

The data input/output program 8000 is executed when the storage system400 receives the request to input/output data from the host computer200. It should be noted that the detail of the data input/output program8000 will be explained with reference to FIG. 10.

FIG. 4 is a diagram for explaining the memory 306 provided in thestorage management computer 300 according to the first embodiment ofthis invention.

The memory 306 stores a storage system management table 3100, a servicemanagement computer management table 3200, a control computer managementtable creating program 9000, a storage area allocating program 10000, astorage area unallocating program 11000, a command device allocatingprogram 12000, a command device unallocating program 13000, a paircreating program 14000, and a pair deleting program 15000.

The storage system management table 3100 includes information formanaging the storage system 400 managed by the storage managementcomputer 300. It should be noted that the detail of the storage systemmanagement table 3100 will be explained with reference to FIG. 12.

The service management computer management table 3200 includesinformation for managing the service management computer 500. It shouldbe noted that the detail of the service management computer managementtable 3200 will be explained with reference to FIG. 13.

The control computer management table creating program 9000 creates thecontrol computer management table 2300. It should be noted that thedetail of processes of the control computer management table creatingprogram 9000 will be explained with reference to FIG. 14.

The storage area allocating program 10000 executes processes forupdating the control computer management table 2300 when the storagearea is allocated to the host computer 200. It should be noted that thedetail of processes of the storage area allocating program 10000 will beexplained with reference to FIG. 15.

The storage area unallocating program 11000 executes processes forupdating the control computer management table 2300 when therelationship of allocation between the storage area and the hostcomputer 200 is freed. It should be noted that the detail of processesof the storage area unallocating program 11000 will be explained withreference to FIG. 16.

The command device allocating program 12000 executes processes forupdating the control computer management table 2300 when the storagearea is allocated to the host computer 200 as the command device. Itshould be noted that the detail of processes of the command deviceallocating program 12000 will be explained with reference to FIG. 17.

The command device unallocating program 13000 executes processes forupdating the control computer management table 2300 when therelationship of allocation as the command device between the storagearea and the host computer 200 is freed. It should be noted that thedetail of processes of the command device unallocating program 13000will be explained with reference to FIG. 18.

The pair creating program 14000 executes processes for updating thecontrol computer management table 2300 when a pair is created. It shouldbe noted that the detail of processes of the pair creating program 14000will be explained with reference to FIG. 19.

The pair deleting program 15000 executes processes for updating thecontrol computer management table 2300 when a pair is deleted. It shouldbe noted that the detail of processes of the pair deleting program 15000will be explained with reference to FIG. 20.

FIG. 5 is a table showing a configuration of the service managementtable 1100 according to the first embodiment of this invention.

The service management table 1100 includes columns of a serviceidentifier 11001, a computer identifier 11002, and a role-of-computer11003.

An identifier unique to a service provided by the computer system isregistered in the column of the service identifier 11001. An identifierunique to the host computer 200 that provides the service is registeredin the column of the computer identifier 11002. A name of a role of thehost computer 200 that provides the service is registered in the columnof the role-of-computer 11003. To be concrete, a name of applicationexecuted by the host computer 200 to provide the service is registeredin the column of the role-of-computer 11003.

To be specific, service A is composed of a server 1, a server 2, and aserver 3. The server 1 executes an application for providing a serviceas a WEB server. The server 2 executes an application for providing aservice as database. The server 3 executes an application for providinga service as a WEB server. It should be noted that the service A is thatof online shopping site, for example.

FIG. 6 is a table showing a configuration of the storage area managementtable 2050 according to the first embodiment of this invention.

The storage area management table 2050 includes columns of a storagesystem identifier 20501, a storage area identifier 20502, a storage areaattribute 20503, and an “allocated” 20504.

An identifier unique to the storage system 400 storing the storage areamanagement table 2050 is registered in the column of the storage systemidentifier 20501.

An identifier of the storage area set in the storage system 400 isregistered in the column of the storage area identifier 20502. It shouldbe noted that the identifier of this storage area only needs to beunique within the storage system 400 in which the storage area is set.

Information indicating attributes of the storage area is registered inthe column of the storage area attribute 20503. To be specific, “RW”,“R”, or the like is registered in the column of the storage areaattribute 20503. When “RW” is registered in the column of the storagearea attribute 20503, the storage area identified by the identifierregistered in the column of the storage area identifier 20502 of theentry is a storage area to which reading/writing of data is permitted.When “R” is registered in the column of the storage area attribute20503, the storage area identified by the identifier registered in thecolumn of the storage area identifier 20502 of the entry is a storagearea to which only the reading of data is permitted. It should be notedthat the storage area attribute 20503 can be set by the host computer200 via the command device. This point will be detailed with referenceto FIG. 10.

Information indicating whether a storage area is allocated to the hostcomputer 200 is registered in the column of the “allocated” 20504. When“Y” is registered in the column of the “allocated” 20504, it indicatesthat the storage area identified by the storage area identifier 20502 ofthe entry is allocated to the host computer 200. It should be noted thatwhen “N” is registered in the column of the “allocated” 20504, itindicates that the storage area identified by the storage areaidentifier 20502 of the entry is not allocated to the host computer 200.

FIG. 7 is a table showing a configuration of the storage area allocationmanagement table 2100 according to the first embodiment of thisinvention.

The storage area allocation management table 2100 includes columns of astorage system identifier 21001, a storage area identifier 21002, acomputer identifier 21003, and a command device 21004.

An identifier unique to the storage system 400 storing the storage areaallocation management table 2100 is registered in the column of thestorage system identifier 21001.

An identifier of the storage area set in the storage system 400 isregistered in the column of the storage area identifier 21002. It shouldbe noted that the identifier of this storage area only needs to beunique within the storage system 400 in which the storage area is set.

An identifier of the host computer 200 that can input/output datato/from the storage area identified by the identifier registered in thestorage area identifier 21002 of the entry is registered in the columnof the computer identifier 21003.

Information indicating whether the storage area identified by theidentifier registered in the column of the storage area identifier 21002of the entry is a command device is registered in the column of thecommand device 21004. When “Y” is registered in the column of thecommand device 21004, it indicates that the storage area identified bythe identifier registered in the column of the storage area identifier21002 of the entry is a command device. When “N” is registered in thecolumn of the command device 21004, it indicates that the storage areaidentified by the identifier registered in the column of the storagearea identifier 21002 is not a command device.

It should be noted that when the host computer 200 writes data into thestorage area which is the command device, the storage system 400construes that the written data is a control command. Then, the hostcomputer 200 controls the storage area designated as a control target.It should be noted that the storage area designated as the controltarget must be a storage area registered in the control computermanagement table 2300. It should be noted that this point will bedetailed in processes of the data input/output program 8000 in FIG. 10.

FIG. 8 is a table showing a configuration of the pair management table2200 according to the first embodiment of this invention.

The pair management table 2200 is set when the administrator sets astorage area to be paired with a certain storage area.

The pair management table 2200 includes columns of a first storagesystem identifier 22001, a first storage area identifier 22002, a secondstorage system identifier 22003, a second storage area identifier 22004,and a pair status 22005.

An identifier unique to the storage system 400 in which a storage areaof duplication source is set is registered in the column of the firststorage system identifier 22001.

An identifier of the storage area of duplication source is registered inthe column of the first storage area identifier 22002. It should benoted that the identifier of the storage area only needs to be uniquewithin the storage system 400 in which the storage area is set.

An identifier unique to the storage system 400 in which a storage areaof destination of duplication is set is registered in the column of thesecond storage system identifier 22003.

An identifier of the storage area of destination of duplication isregistered in the column of the second storage area identifier 22004. Itshould be noted that the identifier of the storage area only needs to beunique within the storage system 400 in which the storage area is set.

In other words, data stored in the storage area identified by theidentifier registered in the column of the first storage systemidentifier 22001 and the identifier registered in the column of thefirst storage area identifier 22002 is duplicated to the storage areaidentified by the identifier registered in the column of the secondstorage system identifier 22003 and the identifier registered in thecolumn of the second storage area identifier 22004.

When data is written into the storage area identified by the identifierregistered in the column of the first storage system identifier 22001and the identifier registered in the column of the first storage areaidentifier 22002, the storage system 400 writes the same data as thewritten data into the storage area identified by the identifierregistered in the column of the second storage system identifier 22003and the identifier registered in the column of the second storage areaidentifier 22004. Accordingly, the pieces of data may be synchronizedbetween the storage areas.

Information indicating the status of the pair is registered in thecolumn of the pair status 22005. To be specific, “Sync”, “Split”, or thelike is registered in the column of the pair status 22005.

When “Sync” is registered in the column of the pair status 22005, itindicates that the pieces of data are synchronized between the storageareas. When “Split” is registered in the column of the pair status22005, it indicates a state in which the synchronization of the piecesof data is stopped between the storage areas. In other words, the datastored in the storage area identified by the identifier registered inthe column of the first storage system identifier 22001 and theidentifier registered in the column of the first storage area identifier22002 at a certain time point is held in the storage area identified bythe identifier registered in the column of the first storage systemidentifier 22001 and the identifier registered in the column of thefirst storage area identifier 22002.

It should be noted that the pair status 22005 is set when theadministrator sets the pair management table 2200 by using the storagemanagement computer 300. There is also a case where the pair status22005 is set when the storage area is controlled by the datainput/output request from the host computer 200 to the storage areawhich is the command device. It should be noted that this point will bedetailed with reference to FIG. 10.

FIG. 9 is a table showing a configuration of the control computermanagement table 2300 according to the first embodiment of thisinvention.

The control computer management table 2300 includes columns of a storagesystem identifier 23001, a control target storage area identifier 23002,and a computer identifier 23003.

An identifier unique to the storage system 400 that stores the controlcomputer management table 2300 is registered in the column of thestorage system identifier 23001.

An identifier of the storage area which is able to be controlled by thehost computer 200 identified by the identifier registered in the columnof the computer identifier 23003 of the entry via the storage area ofthe command device is registered in the column of the control targetstorage area identifier 23002. It should be noted that this identifierof the storage area only needs to be unique within the storage system400 in which the storage area is set.

An identifier unique to the host computer 200 capable of operating thestorage area identified by the identifier registered in the column ofthe control target storage area identifier 23002 of the entry via thestorage area of the command device is registered in the column of thecomputer identifier 23003.

The host computer 200 can only control the storage area registered inthe column of the control target storage area identifier 23002 of theentry of the identifier of that computer 200.

It should be noted that the data input/output program 8000 refers to thecontrol computer management table 2300. This point will be explained inconnection with processes of the data input/output program 8000 shown inFIG. 10.

Next, the processes of the data input/output program 8000 will beexplained with reference to FIG. 10.

FIG. 10 is a flowchart of the processes of the data input/output program8000 according to the first embodiment of this invention.

The specific storage area (command device) for enabling the hostcomputer 200 to control the storage area is set in the storage system400. The command device is set when the administrator sets the commanddevice 21004 included in the storage area allocation management table2100 via the storage management computer 300.

The storage system 400 processes the data input/output request from thehost computer 200 to the command device as a storage area operationrequest.

The data input/output program 8000 is executed by the processor 430.

The storage system 400 receives the data input/output request to thestorage area transmitted by host computers 200 via the first fiberchannel interface 470 in Step 8010. It should be noted that the datainput/output request contains the identifier of the host computer 200that transmits the data input/output request and the identifier of thestorage area that is to be a target of data input/output. When thestorage area that is the target of data input/output is the commanddevice, the data input/output request contains the storage areaoperation request. The storage area operation request contains theidentifier of the control target storage area that is the target to becontrolled via the command device, and contents of operation to thecontrol target storage area.

The data input/output program 8000 refers to the storage area allocationmanagement table 2100 to judge whether there exists an entry coincidentwith the identifier of the host computer 200 that has transmitted thedata input/output request and the identifier of the storage area to bethe target of the data input/output in Step 8030.

To be specific, the data input/output program 8000 judges whether thereexists the entry, among entries registered in the storage areaallocation management table 2100, whose identifier registered in thecomputer identifier 21003 coincides with the identifier of the hostcomputer 200 that transmits the data input/output request, and whoseidentifier registered in the storage area identifier 21002 coincideswith the identifier of the storage area that is the target of the datainput/output.

When the data input/output program 8000 judges that there exists noentry that coincides with the identifier of the host computer 200 thathas transmitted the data input/output request and the identifier of thestorage area that is the target of the data input/output in the processof Step 8030, it transmits a response to reject the data input/output tothe host computer 200 that has transmitted the data input/output requestin Step 8110, and ends the processes of the data input/output program8000 in Step 8090.

When the data input/output program 8000 judges that there exists anentry that coincides with the identifier of the host computer 200 thathas transmitted the data input/output request and the identifier of thestorage area that is the target of the data input/output in the processof Step 8030, it judges whether the storage area that is the target ofthe data input/output is the command device in Step 8040.

To be specific, the data input/output program 8000 refers to the storagearea allocation management table 2100 to judge whether “Y” is registeredin the command device 21004 of the entry coincident with the identifierof the host computer 200 that has transmitted the data input/outputrequest and the identifier of the storage area that is the target of thedata input/output.

When the data input/output program 8000 judges that the storage areathat is the target of the data input/output is not the command device inthe process of Step 8040, the data input/output program 8000 executesthe data input/output with respect to the storage area that is thetarget of the data input/output in Step 8130, and ends the processes ofthe data input/output program 8000 in Step 8090.

On the other hand, when the data input/output program 8000 judges thatthe storage area that is the target of the data input/output is thecommand device in the process of Step 8040, the data input/outputprogram 8000 obtains the storage area operation request contained in thedata input/output request received in the process of Step 8010. Then,the data input/output program 8000 obtains an identifier of the controltarget storage area from the obtained storage area operation request inStep 8050.

Next, the data input/output program 8000 refers to the control computermanagement table 2300 to judge whether there exists an entry coincidentwith the identifier of the host computer 200 that has transmitted thedata input/output request and the identifier of the control targetstorage area obtained in the process of Step 8050 in Step 8070.

To be specific, the data input/output program 8000 judges whether thereexists an entry, among entries registered in the control computermanagement table 2300, whose identifier registered in the computeridentifier 23003 coincides with the identifier of the host computer 200that has transmitted the data input/output request, and whose identifierregistered in the control target storage area identifier 23002 coincideswith the identifier of the control target storage area obtained in theprocess of Step 8050.

When the data input/output program 8000 judges that there exists noentry coincident with the identifier of the host computer 200 that hastransmitted the data input/output request and the identifier of thecontrol target storage area obtained in the process of Step 8050, thehost computer that has transmitted the data input/output request is thehost computer 200 that is not permitted to control the control targetstorage area. Accordingly, the data input/output program 8000 transmitsa response to reject the operation of the storage area to the hostcomputer 200 that has transmitted the data input/output request in Step8140, and ends the processes of the data input/output program 8000 inStep 8090.

When the data input/output program 8000 judges that there exists theentry that coincides with the identifier of the host computer 200 thathas transmitted the data input/output request and the identifier of thecontrol target storage area obtained in the process of Step 8050 in theprocess of Step 8070, the host computer that has transmitted the datainput/output request is the host computer 200 that is permitted tocontrol the target storage area. Accordingly, the data input/outputprogram 8000 controls the target storage area in Step 8080, and ends theprocesses of the data input/output program 8000 in Step 8090.

When the control of the target storage area is an operation for changingthe pair status, for example, the data input/output program 8000 changesinformation registered in the pair status 22005 of the entry whoseidentifier registered in the storage area identifier 21002, among theentries registered in the pair management table 2200, coincides with theidentifier of the control target storage area in the process of Step8080.

When the control of the target storage area is an operation of changingthe attribute of the storage area, for example, the data input/outputprogram 8000 changes information registered in a storage area attribute2053 of the entry whose identifier registered in the storage areaidentifier 20502, among the entries registered in the storage areamanagement table 2050, coincides with the identifier of the controltarget storage area.

Next, a case where the administrator changes the configuration of thestorage system 400 by using the storage management computer 300 will beexplained.

The storage management computer 300 can access the service managementtable 1100 stored in the service management computer 500 via the network10. The storage management computer 300 can also access the storage areamanagement table 2050, the storage area allocation management table2100, the pair management table 2200, and the control computermanagement table 2300 stored in the storage system 400 via the network10.

Then, the storage management computer 300 changes the configuration ofthe storage system 400 based on instructions of the administrator.

Examples of changing the configuration of the storage system 400 includeallocation of the storage area to the host computer 200, unallocation ofthe storage area allocated to the host computer 200, allocation ofcommand device to the host computer 200, unallocation of the commanddevice allocated to the host computer 200, creation of the pair betweenthe storage areas, and deletion of the pair between the storage areas.

The administrator instructs the storage management computer 300 tochange the configuration of the storage system by using a graphical userinterface (GUI) provided by the storage management computer 300, forexample.

FIG. 11 is a table for explaining a storage area allocation GUI 4100provided by the storage management computer 300 in allocating thestorage area to the host computer 200 according to the first embodimentof this invention.

The storage area allocation GUI 4100 contains a service selecting column4110, a server selecting column 4120, a storage system selecting column4130, a storage area selecting column 4140, an execute button 4150, anda cancel button 4160.

The administrator can select one service provided in the computer systemin the service selecting column 4110. In other words, the administratorselect one service out of services identified by identifiers registeredin the service identifier 11001 contained in the service managementtable 1100 in the service selecting column 4110.

The administrator also selects one computer 200 composing the serviceselected in the service selecting column 4110 in the server selectingcolumn 4120. In other words, the administrator selects one computer 200out of the host computers 200 identified by identifiers registered inthe computer identifier 11002 of the entry in which the identifierregistered in the service identifier 11001 coincides with the identifierof the service selected in the service selecting column 4110 in theserver selecting column 4120.

The administrator further selects one storage system 400 provided in thecomputer system in the storage system selecting column 4130. In otherwords, the administrator selects one storage system 400 out of thestorage systems 400 identified by the identifiers registered in thestorage system identifier 31001 contained in the storage systemmanagement table 3100 stored in the storage management computer 300 inthe storage system selecting column 4130.

The administrator also selects one storage area set in the storagesystem 400 selected in the storage system selecting column 4130 in thestorage area selecting column 4140. In other words, the administratorselects one storage area out of the storage areas identified by theidentifiers registered in the storage area identifier 20502 contained inthe storage area management table 2050 stored in the storage system 400selected in the storage system selecting column 4130 in the storage areaselecting column 4140.

Then, when the administrator operates an execute button 4150, a newentry is added to the storage area allocation management table 2100stored in the storage system 400 selected in the storage systemselecting column 4130.

To be specific, the identifier of the storage area selected in thestorage area selecting column 4140 is registered in the storage areaidentifier 21002. The identifier of the host computer 200 selected inthe server selecting column 4120 is registered in the computeridentifier 21003. It should be noted that “N” is registered in thecommand device 21004. When the storage area allocation GUI 4100 is a GUIfor allocating the command device to the host computer 200, “Y” isregistered in the command device 21004.

When the cancel button 4160 is operated, the content selected in eachselecting column is canceled.

In the example shown in FIG. 11, when the execute button 4150 isoperated, the storage area “LDEV 40” of the storage system “STORAGE 1”is newly allocated to the server “SERVER 3” that provides the service“A”.

FIG. 12 is a table showing a configuration of a storage systemmanagement table 3100 according to the first embodiment of thisinvention.

Identifiers unique to all storage systems 400 managed by the storagemanagement computer 300 are registered in the storage system managementtable 3100.

The identifiers of all storage systems 400 provided in the computersystem can be obtained by making a reference to the storage systemmanagement table 3100.

FIG. 13 is a table showing a configuration of the service managementcomputer management table 3200 according to the first embodiment of thisinvention.

The service management computer management table 3200 contains a columnof a service management computer identifier 32001.

An identifier of the service management computer 500 managed by thestorage management computer 300 is registered in the service managementcomputer identifier 32001.

The identifier of the service management computer 500 for managingservices can be obtained by making a reference to the service managementcomputer management table 3200. When the storage management computer 300refers to the service management table 1100 stored in the servicemanagement computer 500, it refers to the service management computermanagement table 3200 to obtain the identifier of the service managementcomputer 500 storing the service management table 1100 to be referredto.

Next, processes of the control computer management table creatingprogram 9000 will be explained with reference to FIG. 14.

FIG. 14 is a flowchart of the processes of the control computermanagement table creating program 9000 according to the first embodimentof this invention.

When the function of enabling the host computer 200 to control thestorage area via the command device is introduced to the storage system400, the control computer management table creating program 9000 isexecuted on the storage management computer 300. Then, a controlcomputer management table 2300 is created by executing the controlcomputer management table creating program 9000.

The control computer management table creating program 9000 stored inthe disk unit provided in the storage management computer 300 is loadedto the memory 306 and is executed by the processor unit.

When the control computer management table creating program 9000 isexecuted, the control computer management table creating program 9000refers to the storage system management table 3100 to obtain theidentifier registered in the storage system identifier 31001. Then, thecontrol computer management table creating program 9000 collects thestorage area allocation management table 2100 stored in the storagesystem 400 identified by the obtained identifier, and stores the storagearea allocation management table 2100 in the memory 306 in Step 9005.The control computer management table creating program 9000 obtains allof the entries registered in the storage area allocation managementtable 2100 collected in the process of Step 9005 in Step 9010. Therespective entries obtained include an identifier registered in thestorage system identifier 21001, an identifier registered in the storagearea identifier 21002, and an identifier registered in the computeridentifier 21003.

It should be noted that the control computer management table creatingprogram 9000 selects one entry out of all of the obtained entries in theprocess of Step 9010.

Next, the control computer management table creating program 9000 refersto the service management table 1100 to obtain the identifier of thehost computer 200 that provides the same service as that of the hostcomputer 200 identified by the identifier registered in the computeridentifier 21003 contained in the entry selected in the process of Step9010 in Step 9020. It should be noted that when the control computermanagement table creating program 9000 refers to the service managementtable 1100, the control computer management table creating program 9000obtains the service management table 1100 stored in the servicemanagement computer 500 and stores service management table 1100 in thememory 306.

To be specific, the control computer management table creating program9000 obtains the identifier of the service registered in the serviceidentifier 11001 of the entry whose identifier registered in thecomputer identifier 11002, among entries registered in the servicemanagement table 1100, coincides with the identifier registered in thecomputer identifier 21003 contained in the entry selected in the processof Step 9010.

Then, the control computer management table creating program 9000obtains identifiers of all computers 200 registered in the computeridentifier 11002 contained in the entry whose identifier of the serviceregistered in the service identifier 11001 coincides with the obtainedidentifier of the service among the entries registered in the servicemanagement table 1100.

It should be noted that in the process of Step 9020, the controlcomputer management table creating program 9000 selects the identifierof one computer 200 out of the obtained identifiers of all computers 200that provide the same services.

Next, the control computer management table creating program 9000 refersto the storage area allocation management table 2100 collected in theprocess of Step 9005 to judge whether the command device is allocated tothe host computer 200 identified by the identifier selected in theprocess of Step 9020 in Step 9050.

To be specific, the control computer management table creating program9000 refers to the storage area allocation management table 2100 inwhich the identifier registered in the storage system identifier 21001coincides with the identifier to be registered in the storage systemidentifier 21001 contained in the entry selected in the process of Step9010 out of the entries stored in the storage area allocation managementtable 2100 collected in the process of Step 9005.

Then, the control computer management table creating program 9000 judgeswhether “Y” is registered in the command device 21004 of the entry inwhich the identifier registered in the computer identifier 21003coincides with the identifier of the host computer 200 obtained in theprocess of Step 9020 out of the entries stored in the storage areaallocation management table 2100 to be referred to.

When it is judged in the process of Step 9050 that the command device isnot allocated to the host computer 200 identified by the identifierselected in the process of Step 9020, the control computer managementtable creating program 9000 advances to a process of Step 9080.

On the other hand, when it is judged in the process of Step 9050 thatthe command device is allocated to the host computer 200 identified bythe identifier selected in the process of Step 9020, the host computer200 to which the command device is allocated is the host computer 200that is permitted to control the storage area allocated to the hostcomputer 200 that provides the same service as the host computer 200.Accordingly, the control computer management table creating program 9000registers the identifier of the storage area contained in the entryselected in the process of Step 9010 and the identifier of the hostcomputer 200 judged to have been allocated with the command device inthe process of Step 9050 in the control computer management table 2300in Step 9070, and advances to the process of Step 9080.

To be specific, the control computer management table creating program9000 registers the identifier of the storage area contained in the entryselected in the process of Step 9010 in the control target storage areaidentifier 23002. Then, the control computer management table creatingprogram 9000 registers the identifier of the host computer 200 judged tohave been allocated with the command device in the process of Step 9050in the computer identifier 23003.

Next, the control computer management table creating program 9000 refersto the pair management table 2200 stored in the storage system 400identified by the identifier registered in the storage system identifier21001 contained in the entry selected in the process of Step 9010. Then,the control computer management table creating program 9000 obtains anidentifier of a storage area composing a pair with the storage areaidentified by the identifier registered in the storage area identifier21002 contained in the entry selected in the process of Step 9010 inStep 9080.

The control computer management table creating program 9000 refers tothe storage area allocation management table 2100 collected in theprocess of Step 9005. Then, the control computer management tablecreating program 9000 judges whether the command device is allocated tothe host computer 200 identified by the identifier selected in theprocess of Step 9020 in Step 9090. It should be noted that because aconcrete process of Step 9090 is the same as the process of Step 9050,explanation thereof will be omitted.

When it is judged that no command device is allocated to the hostcomputer 200 identified by the identifier selected in the process ofStep 9020 in the process of Step 9090, the process advances to Step9110.

When it is judged in the process of Step 9090 that the command device isallocated to the host computer 200 identified by the identifier selectedin the process of Step 9020, the host computer 200 to which the commanddevice is allocated is the host computer 200 permitted to control thestorage area that is allocated to the host computer 200 that providesthe same service as the host computer 200 and that composes the pairwith the storage area set in the storage system 400 to which the commanddevice is set. Accordingly, the control computer management tablecreating program 9000 registers the identifier of the storage areaobtained in the process of Step 9080 and the identifier of the hostcomputer 200 judged to have been allocated with the command device inthe process of Step 9090 to the control computer management table 2300in Step 9100 to advance to a process of Step 9110.

To be specific, the control computer management table creating program9000 registers the identifier of the storage area obtained in theprocess of Step 9080 to the control target storage area identifier23002. Then, the control computer management table creating program 9000registers the identifier of the host computer 200 judged to have beenallocated with the command device in the process of Step 9090 to thecomputer identifier 23003.

Next, the control computer management table creating program 9000 judgeswhether the processes of Steps 9050 to 9100 have been executed to theidentifiers of all of the host computers 200 that have been obtained inthe process of Step 9020 and that provide the same services in Step9110.

When it is judged in the process of Step 9110 that the processes ofSteps 9050 to 9100 have not been executed to the identifiers of all ofthe host computers 200 that have been obtained in the process of Step9020 and that provide the same service, the process returns to Step9020.

On the other hand, when it is judged in the process of Step 9110 thatthe processes of Steps 9050 to 9100 have been executed to theidentifiers of all of the host computers 200 that have been obtained inthe process of Step 9020 and that provide the same service, it is judgedwhether the processes of Steps 9020 to 9110 have been executed to allentries obtained in the process of Step 9010 in Step 9120.

When it is judged in the process of Step 9120 that the processes ofSteps 9020 to 9110 have not been executed to all entries obtained in theprocess of Step 9010, the process returns to Step 9010.

On the other hand, when it is judged in the process of Step 9120 thatthe processes of Steps 9020 to 9110 have been executed to all entriesobtained in the process of Step 9010, the processes of the controlcomputer management table creating program 9000 end in Step 9130.

When the command device is allocated to the host computer 200 thatprovides the same service as a certain computer 200 by the processesdescribed above, the identifier of the storage area allocated to thecertain computer 200 and the identifier of the host computer 200 thatprovides the same service as the certain computer 200 are registered inthe control computer management table 2300. Accordingly, the hostcomputer 200 to which the command device is allocated can control thestorage area allocated to the other computer 200 that provides the sameservice as the host computer 200 via the command device.

Next, processes of updating the control computer management table 2300when the configuration of the storage system 400 is changed will beexplained with reference to FIGS. 15 through 20. To be specific, thestorage management computer 300 changes the configuration specified bythe administrator when the administrator instructs to change theconfiguration of the storage system 400 by using the storage managementcomputer 300. The storage management computer 300 also updates thecontrol computer management table 2300 stored in the storage system 400.Accordingly, along with the change of the configuration of the storagesystem 400, the host computer 200 that can control the storage area viathe command device is changed.

Examples of changing of the configuration of the storage system 400include a case of allocating the storage area to the host computer 200,a case of unallocating the storage area allocated to the host computer200, a case of allocating the command device to the host computer 200, acase of unallocating the command device allocated to the host computer200, a case of creating a pair of storage areas, a case of deleting thepair of storage areas, and the like.

Detail of the processes of updating the control computer managementtable 2300 in allocating the storage area to the host computer 200 willbe explained with reference to FIG. 15. Detail of processes of updatingthe control computer management table 2300 in unallocating the storagearea allocated to the host computer 200 will be explained with referenceto FIG. 16. Detail of processes of updating the control computermanagement table 2300 in allocating the command device to the hostcomputer 200 will be explained with reference to FIG. 17. Detail ofprocesses of updating the control computer management table 2300 inunallocating the command device allocated to the host computer 200 willbe explained with reference to FIG. 18. Detail of processes of updatingthe control computer management table 2300 in creating the pair ofstorage areas will be explained with reference to FIG. 19. Detail ofprocesses of updating the control computer management table 2300 indeleting the pair of storage areas will be explained with reference toFIG. 20.

FIG. 15 is a flowchart of processes of the storage area allocatingprogram 10000 according to the first embodiment of this invention.

The storage area allocating program 10000 is loaded to the memory 306provided in the storage management computer 300 and is executed by theprocessor unit.

First, the storage area allocating program 10000 receives a storage areaallocation request inputted by the administrator in Step 10010. Itshould be noted that the storage area allocation request contains anidentifier of the host computer 200 to which the storage area is newlyallocated, an identifier of the storage system 400 in which the storagearea to be newly allocated to the host computer 200 is set, and anidentifier of the storage area to be newly allocated to the hostcomputer 200.

Next, the storage area allocating program 10000 registers “Y” indicatingthat the storage area is allocated to the host computer 200 in thecolumn of the “allocated” 20504 contained in the storage area managementtable 2050 corresponding to the storage area allocation request in Step10020.

To be specific, the storage area allocating program 10000 registers “Y”in the column of the “allocated” 20504 of an entry in which anidentifier registered in the storage area identifier 20502 coincideswith the identifier of the storage area contained in the storage areaallocation request among entries registered in the storage areamanagement table 2050 stored in the storage system 400 identified by theidentifier of the storage system 400 contained in the storage areaallocation request.

Then, the storage area allocating program 10000 adds the new entry tothe storage area allocation management table 2100 corresponding to thestorage area allocation request in Step 10030.

To be specific, the storage area allocating program 10000 registers theidentifier of the storage area contained in the storage area allocationrequest to the storage area identifier 21002 and the identifier of thehost computer 200 contained in the storage area allocation request tothe computer identifier 21003 as a new entry to the storage areamanagement table 2050 stored in the storage system 400 identified by theidentifier of the storage system 400 contained in the storage areaallocation request. The storage area allocating program 10000 alsoregisters “N” to the command device 21004 of the added entry.

Next, the storage area allocating program 10000 refers to the servicemanagement table 1100 to obtain an identifier of a computer 200 thatprovides the same service as the host computer 200 identified by theidentifier of the host computer 200 contained in the storage areaallocation request in Step 10040. It should be noted that the storagearea allocating program 10000 obtains the service management table 1100stored in the service management computer 500 and stores the servicemanagement table 1100 in the memory 306 in the case of referring to theservice management table 1100.

To be specific, the storage area allocating program 10000 obtains theidentifier of the service registered in the service identifier 11001 ofan entry in which the identifier registered in the computer identifier11002 coincides with the identifier of the host computer 200 containedin the storage area allocation request among the entries registered inthe service management table 1100.

Then, the storage area allocating program 10000 obtains identifiers ofall computers 200 registered in the computer identifier 11002 containedin the entry in which the identifier of the service registered in theservice identifier 11001 coincides with the obtained identifier of theservice among the entries registered in the service management table1100.

It should be noted that the storage area allocating program 10000selects an identifier of one computer 200 out of the obtainedidentifiers of all computers 200 that provide the same service in theprocess of Step 10040.

Next, the storage area allocating program 10000 refers to the storagearea allocation management table 2100 to judge whether the commanddevice is allocated to the host computer 200 identified by theidentifier selected in the process of Step 10040 in Step 10050. Itshould be noted that the storage area allocating program 10000 obtainsthe storage area allocation management table 2100 stored in the storagesystem 400 and stores the storage area allocation management table 2100in the memory 306 in the case of referring to the storage areaallocation management table 2100.

To be specific, the storage area allocating program 10000 refers to thestorage area allocation management table 2100 stored in the storagesystem 400 identified by the identifier of the storage system 400contained in the storage area allocation request.

Then, the storage area allocating program 10000 judges whether “Y” isregistered in the command device 21004 of the entry in which theidentifier registered in the computer identifier 21003 coincides withthe identifier of the host computer 200 contained in the storage areaallocation request among entries registered in the storage areaallocation management table 2100 to be referred to.

When it is judged in the process of Step 10050 that no command device isallocated to the host computer 200 identified by the identifier selectedin the process of Step 10040, the storage area allocating program 10000advances to the process of Step 10070.

On the other hand, when it is judged in the process of Step 10050 thatthe command device is allocated to the host computer 200 identified bythe identifier selected in the process of Step 10040, the host computer200 to which the command device is allocated and that provides the sameservice as the host computer 200 is permitted to control the storagearea newly allocated to the host computer 200. Accordingly, the storagearea allocating program 10000 registers the identifier of the storagearea contained in the storage area allocation request and the identifierof the host computer 200 judged to have been allocated with the commanddevice in the process of Step 10050 in the control computer managementtable 2300 in Step 10060, and advances to the process of Step 10070.

To be specific, the storage area allocating program 10000 registers theidentifier of the storage area contained in the storage area allocationrequest to the control target storage area identifier 23002. Then, thestorage area allocating program 10000 registers the identifier of thehost computer 200 judged to have been allocated with the command devicein the process of Step 10050 to the computer identifier 23003.

In other words, the identifier of the storage area allocated anew to thehost computer 200 is registered in the control target storage areaidentifier 23002. The identifier of the host computer 200 that providesthe same service as the host computer 200 to which the storage area isallocated anew, and to which the command device is allocated isregistered in the computer identifier 23003.

Next, the storage area allocating program 10000 judges whether theprocesses of Steps 10050 to 10060 have been executed to the identifiersof all computers 200 that provide the same service and are obtained inthe process of Step 10040 in Step 10070.

When it is judged in the process of Step 10070 that the processes ofSteps 10050 to 10060 have not been executed to the identifiers of allcomputers 200 that provide the same service and are obtained in theprocess of Step 10040, the process returns to Step 10040.

When it is judged in the process of Step 10070 that the processes ofSteps 10050 to 10060 have been executed to the identifiers of allcomputers 200 that provide the same service and are obtained in theprocess of Step 10040, the processes of the storage area allocatingprogram 10000 end in Step 10080.

FIG. 16 is a flowchart of processes of the storage area unallocatingprogram 11000 according to the first embodiment of this invention.

The storage area unallocating program 11000 is loaded to the memory 306provided in the storage management computer 300 and is executed by theprocessor unit.

First, the storage area unallocating program 11000 accepts a storagearea unallocation request inputted by the administrator in Step 11010.It should be noted that the storage area unallocation request containsan identifier of the host computer 200 whose relationship of allocationwith the storage area is freed, an identifier of the storage system 400in which the storage area whose relationship of allocation with the hostcomputer 200 is freed, and an identifier of the storage area whoserelationship of allocation with the host computer 200 is freed.

Next, the storage area unallocating program 11000 refers to the storagearea allocation management table 2100 corresponding to the storage areaunallocation request to judge whether another computer 200 is allocatedwith the storage area identified by the identifier of the storage areacontained in the storage area unallocation request in Step 11020. Itshould be noted that the storage area unallocating program 11000 obtainsthe storage area allocation management table 2100 stored in the storagesystem 400, and stores the storage area allocation management table 2100in the memory 306 in the case of referring to the storage areaallocation management table 2100.

To be specific, the storage area unallocating program 11000 refers tothe storage area allocation management table 2100 stored in the storagesystem 400 identified by the identifier of the storage system 400contained in the storage area unallocation request.

Then, the storage area unallocating program 11000 judges whether anidentifier other than the identifier of the host computer 200 containedin the storage area unallocation request is registered in the computeridentifier 21003 of an entry coincident with the identifier of thestorage area contained in the storage area unallocation request amongentries registered in the storage area allocation management table 2100to be referred to.

When it is judged in the process of Step 11020 that there exists theother computer 200 that is allocated with the storage area identified bythe identifier of the storage area contained in the storage areaunallocation request, there should exist computer 200 that is permittedto control the storage area whose relationship of allocation with thehost computer 200 is freed. Accordingly, the storage area unallocatingprogram 11000 advances to a process of Step 11050.

When it is judged in the process of Step 11020 that no other computer200 is allocated with the storage area identified by the identifier ofthe storage area contained in the storage area unallocation request, thestorage area unallocating program 11000 registers “N” indicating thatthe storage area is not allocated to the host computer 200 in the“allocated” 20504 contained in the storage area management table 2050corresponding to the storage area unallocation request in Step 11030.

To be specific, the storage area unallocating program 11000 registers“N” to the “allocated” 20504 of the entry in which the identifierregistered in the storage area identifier 20502 coincides with theidentifier of the storage area contained in the storage areaunallocation request among entries registered in the storage areamanagement table 2050 stored in the storage system 400 identified by theidentifier of the storage system 400 contained in the storage areaunallocation request.

Next, the storage area unallocating program 11000 deletes the entry inwhich the identifier registered in the control target storage areaidentifier 23002 coincides with the identifier of the storage areacontained in the storage area unallocation request among entriesregistered in the control computer management table 2300 in Step 11040.

Next, the storage area unallocating program 11000 deletes the entrycorresponding to the storage area unallocation request from the storagearea allocation management table 2100 corresponding to the storage areaunallocation request in Step 11050, and ends the process of the storagearea unallocating program 11000 in Step 11060.

To be specific, the storage area unallocating program 11000 deletes theentry in which the identifier registered in the computer identifier23003 coincides with the identifier of the host computer 200 containedin the storage area unallocation request among the entries registered inthe storage area allocation management table 2100 stored in the storagesystem 400 identified by the identifier of the storage system 400contained in the storage area unallocation request.

FIG. 17 is a flowchart of processes of the command device allocatingprogram 12000 according to the first embodiment of this invention.

The command device allocating program 12000 is loaded to the memory 306provided in the storage management computer 300 and is executed by theprocessor unit.

First, the command device allocating program 12000 receives a commanddevice allocation request in Step 12010. It should be noted that thecommand device allocation request contains an identifier of the hostcomputer 200 to which the command device is newly allocated, anidentifier of the storage system 400 in which the storage area to benewly allocated as the command device to the host computer 200 is set,and an identifier of the storage area to be newly allocated as thecommand device to the host computer 200.

Next, the command device allocating program 12000 registers “Y”indicating that the storage area is allocated to the host computer 200in the column of the “allocated” 20504 contained in the storage areamanagement table 2050 corresponding to the command device allocationrequest in Step 12020.

To be specific, the command device allocating program 12000 registers“Y” in the column of the “allocated” 20504 of an entry in which anidentifier registered in the storage area identifier 20502 coincideswith the identifier of the storage area contained in the command deviceallocation request among entries registered in the storage areamanagement table 2050 stored in the storage system 400 identified by theidentifier of the storage system 400 contained in the command deviceallocation request.

Then, the command device allocating program 12000 adds the new entry tothe storage area allocation management table 2100 corresponding to thecommand device allocation request in Step 12030.

To be specific, the command device allocating program 12000 registersthe identifier of the storage area contained in the command deviceallocation request to the storage area identifier 21002 and theidentifier of the host computer 200 contained in the command deviceallocation request to the computer identifier 21003 as a new entry tothe storage area management table 2050 stored in the storage system 400identified by the identifier of the storage system 400 contained in thecommand device allocation request. The command device allocating program12000 also registers “Y” to the command device 21004 of the added entry.Accordingly, the storage area is allocated to the host computer 200 asthe command device.

Next, the command device allocating program 12000 obtains all entriesregistered in the storage area management table 2050 stored in thestorage system 400 identified by the identifier of the storage system400 contained in the command device allocation request in Step 12040. Itshould be noted that instead of obtaining all entries contained in thestorage area management table 2050, only identifiers of all storageareas registered in the storage area identifier 20502 contained in thestorage area management table 2050 may be obtained.

Next, the command device allocating program 12000 refers to the storagearea allocation management table 2100 stored in the storage system 400identified by the identifier of the storage system 400 contained in thecommand device allocation request to judge whether the host computer 200is allocated with the storage area identified by the identifier of thestorage area contained in the entry obtained in the process of Step12040 in Step 12050. It should be noted that the command deviceallocating program 12000 obtains the storage area allocation managementtable 2100 stored in the storage system 400 and stores the storage areaallocation management table 2100 in the memory 306 in the case ofreferring to the storage area allocation management table 2100. To bespecific, the command device allocating program 12000 judges whether theidentifier is registered in the computer identifier 21003 of an entry inwhich the identifier registered in the storage area identifier 21002coincides with the identifier of the storage area obtained in theprocess of Step 12040 among the entries registered in the storage areaallocation management table 2100 to be referred to.

When it is judged in the process of Step 12050 that the host computer200 is not allocated with the storage area identified by the identifierof the storage area contained in the entry obtained in the process ofStep 12040, the command device allocating program 12000 advances to theprocess of Step 12080.

On the other hand, when it is judged in the process of Step 12050 thatthe host computer 200 is allocated with the storage area identified bythe identifier of the storage area contained in the entry obtained inthe process of Step 12040, the command device allocating program 12000obtains the identifier of the host computer 200 that is allocated withthe storage area and advances to the process of Step 12070.

Next, the command device allocating program 12000 refers to the servicemanagement table 1100 to judge whether the host computer 200 identifiedby the identifier of the host computer 200 obtained in the process ofStep 12050 provides the same service with that of the host computer 200identified by the identifier of the host computer 200 contained in thecommand device allocation request in Step 12060. It should be noted thatthe command device allocating program 12000 obtains the servicemanagement table 1100 stored in the service management computer 500 andstores the service management table 1100 in the memory 306 in the caseof referring to the service management table 1100.

To be specific, the command device allocating program 12000 refers tothe service management table 1100 to judge whether the identifier of theservice registered in the service identifier 11001 of the entrycoincident with the identifier of the host computer 200 obtained in theprocess of Step 12050 coincides with the identifier of the serviceregistered in the service identifier 11001 of the entry coincident withthe identifier of the host computer 200 contained in the command deviceallocation request.

When it is judged in the process of Step 12060 that none of the hostcomputers 200 identified by the identifiers of the host computers 200obtained in the process of Step 12050 provides the same service as thehost computer 200 identified by the identifier of the host computer 200contained in the command device allocation request, the command deviceallocating program 12000 advances to the process of Step 12080.

On the other hand, when it is judged in the process of Step 12060 thatat least one of the host computers 200 identified by the identifiers ofthe host computers 200 obtained in the process of Step 12050 providesthe same service as the host computer 200 identified by the identifierof the host computer 200 contained in the command device allocationrequest, the host computer 200 to which the command device is newlyallocated is a computer 200 that is permitted to control the storagearea allocated to the host computer 200 that provides the same serviceas computer 200. Accordingly, the command device allocating program12000 obtains the identifier of the host computer 200 that provides thesame service as the host computer 200 contained in the command deviceallocation request and advances to a process of Step 12070.

Next, the command device allocating program 12000 adds the identifier ofthe host computer 200 contained in the command device allocation requestand the identifier of the storage area allocated to the host computer200 judged to be the host computer 200 that provides the same service asthe host computer 200 identified by the identifier of the host computer200 contained in the command device allocation request in the process ofStep 12060 to the control computer management table 2300 in Step 12070.

To be specific, the command device allocating program 12000 registersthe identifier of the host computer 200 contained in the command deviceallocation request to the computer identifier 23003. Then, the commanddevice allocating program 12000 registers the identifier of the storagearea allocated to the host computer 200 judged to be the host computer200 that provides the same service as the host computer 200 identifiedby the identifier of the host computer 200 contained in the commanddevice allocation request in the process of Step 12060 to the controltarget storage area identifier 23002.

Next, the command device allocating program 12000 refers to the pairmanagement table 2200 stored in the storage system 400 identified by theidentifier of the storage system 400 contained in the command deviceallocation request to judge whether there exists a storage areacomposing a pair with the storage area identified by the identifier ofthe storage area obtained in the process of Step 12040 in Step 12080. Itshould be noted that the command device allocating program 12000 obtainsthe pair management table 2200 stored in the storage system 400 andstores the pair management table 2200 in the memory 306 in the case ofreferring to the pair management table 2200.

When it is judged in the process of Step 12080 that the storage areacomposing the pair with the storage area identified by the identifier ofthe storage area obtained in the process of Step 12040 does not exist,the command device allocating program 12000 advances to a process ofStep 12120.

When it is judged in the process of Step 12080 that there exists thestorage area composing the pair with the storage area identified by theidentifier of the storage area obtained in the process of Step 12040,the command device allocating program 12000 obtains the identifier ofthe storage area composing the pair with the storage area identified bythe identifier of the storage area contained in the command deviceallocation request and advances to a process of Step 12090.

The command device allocating program 12000 refers to the storage areaallocation management table 2100 stored in the storage system 400identified by the identifier of the storage system 400 contained in thecommand device allocation request to judge whether the host computer 200is allocated with the storage area identified by the identifier of thestorage area obtained in the process of Step 12080 in Step 12090. Itshould be noted that the command device allocating program 12000 obtainsthe storage area allocation management table 2100 stored in the storagesystem 400 and stores the storage area allocation management table 2100in the memory 306 in the case of referring to the storage areaallocation management table 2100.

To be specific, the command device allocating program 12000 judgeswhether the identifier is registered in the computer identifier 21003 ofthe entry in which the identifier registered in the storage areaidentifier 21002 coincides with the identifier of the storage areaobtained in the process of Step 12080 among entries registered in thestorage area allocation management table 2100 to be referred to.

When it is judged in the process of Step 12090 that the host computer200 is not allocated with the storage area identified by the identifierof the storage area contained in the entry obtained in the process ofStep 12080, the command device allocating program 12000 advances to aprocess of Step 12120.

When it is judged in the process of Step 12090 that the host computer200 is allocated with the storage area identified by the identifier ofthe storage area contained in the entry obtained in the process of Step12080, the command device allocating program 12000 obtains theidentifier of the host computer 200 allocated with that storage area andadvances to the process of Step 12070.

Next, the command device allocating program 12000 refers to the servicemanagement table 1100 to judge whether the host computer 200 identifiedby the identifier of the host computer 200 obtained in the process ofStep 12090 provides the same service as the host computer 200 identifiedby the identifier of the host computer 200 contained in the commanddevice allocation request in Step 12100. It should be noted that thecommand device allocating program 12000 obtains the service managementtable 1100 stored in the service management computer 500 and stores theservice management table 1100 in the memory 306 in the case of referringto the service management table 1100.

To be specific, the command device allocating program 12000 refers tothe service management table 1100 to judge whether the identifier of theservice registered in the service identifier 11001 of the entrycoincident with the identifier of the host computer 200 obtained in theprocess of Step 12090 coincides with the identifier of the serviceregistered in the service identifier 11001 of the entry coincident withthe identifier of the host computer 200 contained in the command deviceallocation request.

When it is judged in the process of Step 12100 that none of the hostcomputers 200 identified by the identifier of the host computer 200obtained in the process of Step 12090 provides the same service as thehost computer 200 identified by the identifier of the host computer 200contained in the command device allocation request, the command deviceallocating program 12000 advances to a process of Step 12120.

On the other hand, when it is judged in the process of Step 12100 thatat least one of the host computers 200 identified by the identifiers ofthe host computers 200 obtained in the process of Step 12090 providesthe same service as the host computer 200 identified by the identifierof the host computer 200 contained in the command device allocationrequest, it is the host computer 200 that is permitted to control thestorage area composing the pair with the storage area set in the storagesystem 400 in which the command device newly allocated is set.Accordingly, the command device allocating program 12000 obtains theidentifier of the host computer 200 that provides the same service asthe host computer 200 contained in the command device allocation requestand advances to a process of Step 12110.

Next, the command device allocating program 12000 adds the identifier ofthe storage area contained in the command device allocation request andthe identifier of the storage area allocated to the host computer 200judged to be the host computer 200 that provides the same service as thehost computer 200 identified by the identifier of the host computer 200contained in the command device allocation request in the process ofStep 12100 to the control computer management table 2300 in Step 12110.

To be specific, the command device allocating program 12000 registersthe identifier of the storage area contained in the command deviceallocation request to the computer identifier 23003. Then, the commanddevice allocating program 12000 registers the identifier of the storagearea allocated to the host computer 200 judged to be the host computer200 that provides the same service as the host computer 200 identifiedby the identifier of the host computer 200 contained in the commanddevice allocation request in the process of Step 12100 to the controltarget storage area identifier 23002.

Next, the command device allocating program 12000 judges whether theprocesses of Steps 12050 to 12110 have been executed to all entriesobtained in the process of Step 12040 in Step 12120.

When it is judged in the process of Step 12120 that the processes ofSteps 12050 to 12110 have not been executed to all entries obtained inthe process of Step 12040, the process returns to Step 12040.

When it is judged in the process of Step 12120 that the processes ofSteps 12050 to 12110 have not been executed to all entries obtained inthe process of Step 12040, the processes of the command deviceallocating program 12000 end in Step 12130.

FIG. 18 is a flowchart of processes of the command device unallocatingprogram 13000 according to the first embodiment of this invention.

The command device unallocating program 13000 is loaded to the memory306 provided in the storage management computer 300 and is executed bythe processor unit.

First, the command device unallocating program 13000 accepts a commanddevice unallocation request inputted by the administrator in Step 13010.It should be noted that the command device unallocation request containsan identifier of the host computer 200 whose relationship of allocationwith the command device is freed, an identifier of the storage system400 in which the storage area, i.e., the command device whoserelationship of allocation with the host computer 200, is freed, and anidentifier of the storage area, i.e., the command device, whoserelationship of allocation with the host computer 200 is freed.

Next, the command device unallocating program 13000 refers to thestorage area allocation management table 2100 corresponding to thecommand device unallocation request to judge whether another computer200 is allocated to the storage area identified by the identifier of thestorage area contained in the command device unallocation request inStep 13020. It should be noted that the command device unallocatingprogram 13000 obtains the storage area allocation management table 2100stored in the storage system 400 and stores the storage area allocationmanagement table 2100 in the memory 306 in the case of referring to thestorage area allocation management table 2100.

To be specific, the command device unallocating program 13000 refers tothe storage area allocation management table 2100 stored in the storagesystem 400 identified by the identifier of the storage system 400contained in the command device unallocation request.

Then, the command device unallocating program 13000 judges whether anidentifier other than the identifier of the host computer 200 containedin the command device unallocation request is registered in the computeridentifier 21003 of an entry coincident with the identifier of thestorage area contained in the command device unallocation request amongentries registered in the storage area allocation management table 2100to be referred.

When it is judged in the process of Step 13020 that the other computer200 is allocated to the storage area identified by the identifier of thestorage area contained in the command device unallocation request, thecommand device unallocating program 13000 advances to a process of Step13040.

When it is judged in the process of Step 13020 that no other computer200 is allocated to the storage area identified by the identifier of thestorage area contained in the command device unallocation request, thecommand device whose relationship of allocation with the host computer200 is to be freed is not allocated to any computer 200. Accordingly,the command device unallocating program 13000 registers “N” indicatingthat the storage area is not allocated to the host computer 200 in the“allocated” 20504 contained in the storage area management table 2050corresponding to the command device unallocation request in Step 13030.

To be specific, the command device unallocating program 13000 registers“N” to the “allocated” 20504 of the entry in which the identifierregistered in the storage area identifier 20502 coincides with theidentifier of the storage area contained in the command deviceunallocation request among entries registered in the storage areamanagement table 2050 stored in the storage system 400 identified by theidentifier of the storage system 400 contained in the command deviceunallocation request.

Then, the command device unallocating program 13000 refers to thestorage area allocation management table 2100 corresponding to thecommand device unallocation request to judge whether a command deviceother than that identified by the identifier of the storage areacontained in the command device unallocation request is allocated to thehost computer 200 identified by the identifier of the host computer 200contained in the command device unallocation request in Step 13040.

When it is judged in the process of Step 13040 that the command deviceother than the command device identified by the identifier of thestorage area contained in the command device unallocation request isallocated to the host computer 200 identified by the identifier of thehost computer 200 contained in the command device unallocation request,the command device unallocating program 13000 advances to a process ofStep 13060.

When it is judged in the process of Step 13040 that no command deviceother than the command device identified by the identifier of thestorage area contained in the command device unallocation request isallocated to the host computer 200 identified by the identifier of thehost computer 200 contained in the command device unallocation request,the host computer 200 whose relationship of allocation with the commanddevice is to be freed is not allocated to any command device. Therefore,the host computer 200 should not be permitted to control any storagearea. Accordingly, the command device unallocating program 12000advances to the process of Step 13050.

Next, the command device unallocating program 13000 deletes the entry inwhich the identifier registered in the computer identifier 23003coincides with the identifier of the computer contained in the commanddevice unallocation request among entries registered in the controlcomputer management table 2300 in Step 13040.

Next, the command device unallocating program 13000 deletes the entrycorresponding to the command device unallocation request out of thestorage area allocation management table 2100 corresponding to thecommand device unallocation request in Step 13060 and ends the processesof the command device unallocating program 13000 in Step 13070.

To be specific, the command device unallocating program 13000 deletesthe entry in which the identifier registered in the computer identifier23003 coincides with the identifier of the host computer 200 containedin the command device unallocation request among the entries registeredin the storage area allocation management table 2100 stored in thestorage system 400 identified by the identifier of the storage system400 contained in the command device unallocation request.

FIG. 19 is a flowchart of processes of the pair creating program 14000according to the first embodiment of this invention.

The pair creating program 14000 is loaded to the memory 306 provided inthe storage management computer 300 and is executed by the processorunit.

First, the pair creating program 14000 receives a pair creating requestinputted by the administrator in Step 14010. It should be noted that thepair creating request contains an identifier of a first storage system400 in which a first storage area that composes a pair is set, anidentifier of the first storage area composing the pair, an identifierof a second storage system 400 in which a second storage area thatcomposes the pair is set, and an identifier of the second storage areacomposing the pair.

Then, the pair creating program 14000 adds a new entry to the pairmanagement table 2200 stored in the first storage system 400 identifiedby the identifier of the first storage system 400 contained in the paircreating request in Step 14020. It should be noted that the paircreating program 14000 also adds a new entry to the pair managementtable 2200 stored in the second storage system 400 identified by theidentifier of the second storage system 400 contained in the paircreating request.

To be specific, the pair creating program 14000 registers the identifierof the first storage system 400 contained in the pair creating requestto the first storage system identifier 22001 of the pair managementtable 2200 stored in the first storage system 400. The pair creatingprogram 14000 registers the identifier of the first storage areacontained in the pair creating request to a first storage areaidentifier 22002.

The pair creating program 14000 registers an identifier of the secondstorage system 400 contained in the pair creating request to a secondstorage system identifier 22003. Then, the pair creating program 14000registers an identifier of the second storage area contained in the paircreating request to the second storage area identifier 22004.

Next, the pair creating program 14000 refers to the storage areaallocation management table 2100 stored in the first storage system 400identified by the identifier of the first storage system 400 containedin the pair creating request to obtain an identifier of the hostcomputer 200 to which the first storage area identified by theidentifier of the first storage area contained in the pair creatingrequest is allocated in Step 14030. It should be noted that the paircreating program 14000 obtains the storage area allocation managementtable 2100 stored in the first storage system 400 and stores the storagearea allocation management table 2100 to the memory 306 in the case ofreferring to the storage area allocation management table 2100 stored inthe first storage system 400.

To be specific, the pair creating program 14000 obtains the identifierregistered in the computer identifier 21003 of an entry in which theidentifier registered in the storage area identifier 21002 coincideswith the identifier of the first storage area contained in the paircreating request among entries registered in the storage area allocationmanagement table 2100 to be referred.

Next, the pair creating program 14000 refers to the storage areaallocation management table 2100 stored in the second storage system 400identified by the identifier of the second storage system 400 containedin the pair creating request to obtain an identifier of a computer 200to which the second storage area identified by the identifier of thesecond area contained in the pair creating request is allocated in Step14040. It should be noted that the pair creating program 14000 obtainsthe storage area allocation management table 2100 stored in the secondstorage system 400 and stores the storage area allocation managementtable 2100 in the memory 306 in the case of referring to the storagearea allocation management table 2100 stored in the second storagesystem 400.

To be specific, the pair creating program 14000 obtains the identifierregistered in the computer identifier 21003 of the entry in which theidentifier registered in the storage area identifier 21002 coincideswith the identifier of the second storage area contained in the paircreating request among the entries registered in the storage areaallocation management table 2100 to be referred.

Next, the pair creating program 14000 refers to the service managementtable 1100 to obtain an identifier of the host computer 200 thatprovides the same service with that of the host computer 200 identifiedby the identifier of the host computer 200 obtained in the process ofStep 14030, in Step 14050. It should be noted that the pair creatingprogram 14000 obtains the service management table 1100 stored in theservice management computer 500 and stores the service management table1100 to the memory 306 in the case of referring to the servicemanagement table 1100.

The pair creating program 14000 also refers to the service managementtable 1100 in the process of Step 14050 to obtain the identifier of thehost computer 200 that provides the same service with that of the hostcomputer 200 identified by the identifier of the host computer 200obtained in the process of Step 14040.

To be specific, the pair creating program 14000 obtains the identifierof the service registered in the service identifier 11001 of the entryin which the identifier registered in the computer identifier 11002coincides with the identifier of the host computer 200 obtained in theprocess of Step 14030 among the entries registered in the servicemanagement table 1100.

Then, the pair creating program 14000 obtains identifiers of allcomputers 200 registered in the computer identifier 11002 contained inthe entry in which the identifier of the service registered in theservice identifier 11001 coincides with the obtained identifier ofservice among the entries registered in the service management table1100.

It should be noted that the pair creating program 14000 selects anidentifier of one computer 200 out of the obtained identifiers of allcomputers 200 that provide the same service.

Next, the pair creating program 14000 refers to the storage areaallocation management table 2100 stored in the first storage system 400to judge whether the command device is allocated to the host computer200 identified by the identifier selected in the process of Step 14050,in Step 14060.

To be specific, the pair creating program 14000 judges whether “Y” isregistered in the command device 21004 of the entry in which theidentifier registered in the computer identifier 21003 coincides withthe identifier of the host computer 200 obtained in the process of Step14050 among entries registered in the storage area allocation managementtable 2100 stored in the first storage system 400.

When it is judged in the process of Step 14060 that no command device isallocated to the host computer 200 identified by the identifier selectedin the process of Step 14050, the pair creating program 14000 advancesto the process of Step 14080.

When it is judged in the process of Step 14060 that the command deviceis allocated to the host computer 200 identified by the identifierselected in the process of Step 14050 on the other hand, the hostcomputer 200 that provides the same service with the host computer 200allocated in the first storage area and to which the command device isallocated is permitted to control the first storage area. Accordingly,the pair creating program 14000 registers the identifier of the firststorage area contained in the pair creating request and the identifierof the host computer 200 judged to have been allocated with the commanddevice in the process of Step 14060 in the control computer managementtable 2300 in Step 14070 and advances to the process of Step 14080.

To be specific, the pair creating program 14000 registers the identifierof the first storage area to the control target storage area identifier23002. Then, the pair creating program 14000 registers the identifier ofthe host computer 200 judged to have been allocated with the commanddevice in the process of Step 14050 to the computer identifier 23003.

Next, the pair creating program 14000 refers to the storage areaallocation management table 2100 stored in the second storage system 400to judge whether the command device is allocated to the host computer200 identified by the identifier selected in the process of Step 14050,in Step 14080. It should be noted that the concrete process is the sameas the process of Step 14060, so the explanation will be omitted here.

When it is judged in the process of Step 14080 that the command deviceis not allocated to the host computer 200 identified by the identifierselected in the process of Step 14050, the pair creating program 14000advances to a process of Step 14100.

When it is judged in the process of Step 14080 that the command deviceis allocated to the host computer 200 identified by the identifierselected in the process of Step 14050 on the other hand, the hostcomputer 200 that provides the same service with that of the hostcomputer 200 allocated to the second storage area and to which thecommand device is allocated is permitted to control the second storagearea. Accordingly, the pair creating program 14000 registers theidentifier of the second storage area contained in the pair creatingrequest and the identifier of the host computer 200 judged to have beenallocated with the command device in the process of Step 14060 to thecontrol computer management table 2300 in Step 14090 and advances to aprocess of Step 13100. It should be noted that the concrete process isthe same as the process of Step 14070, so its explanation will beomitted here.

In other words, the identifier of the storage area that composes thenewly created pair is registered in the control target storage areaidentifier 23002. Further, the identifier of the host computer 200 thatprovides the same service with that of the host computer 200 to whichthe storage area that composes the newly created pair is allocated andto which the command device is allocated is registered in the computeridentifier 23003.

Next, the pair creating program 14000 judges whether the processes ofSteps 10060 to 10090 have been executed to the identifiers of allcomputers 200 that provide the same service and are obtained in theprocess of Step 14050, in Step 14100.

When it is judged in the process of Step 14100 that the processes ofSteps 14060 to 14090 have not been executed to the identifiers of allcomputers 200 that provide the same service and are obtained in theprocess of Step 14050, the process returns to Step 14050.

When it is judged in the process of Step 14100 that the processes ofSteps 10060 to 14090 have been executed to the identifiers of allcomputers 200 that provide the same service and are obtained in theprocess of Step 14050, the processes of the pair creating program 14000end in Step 14110.

FIG. 20 is a flowchart of processes of the pair deleting program 15000according to the first embodiment of this invention.

The pair deleting program 15000 is loaded to the memory 306 provided inthe storage management computer 300 and is executed by the processorunit.

First, the pair deleting program 15000 receives a pair freeing requestinputted by the administrator in Step 15010. It should be noted that thepair freeing request contains an identifier of the first storage system400 in which a first storage area that composes a pair to be deleted isset, an identifier of the first storage area composing the pair to bedeleted, an identifier of a second storage system 400 in which a secondstorage area that composes the pair is set, and an identifier of thesecond storage area composing the pair to be deleted.

Then, the pair deleting program 15000 adds a new entry to the pairmanagement table 2200 stored in the first storage system 400 identifiedby the identifier of the first storage system 400 contained in the pairfreeing request in Step 15020. It should be noted that the pair deletingprogram 15000 also deletes an entry to the pair management table 2200stored in the second storage system 400 identified by the identifier ofthe second storage system 400 contained in the pair freeing request.

To be specific, the pair deleting program 15000 deletes entries in whichthe identifier registered in the first storage system identifier 22001,the identifier registered in the first storage area identifier 22002,the identifier registered in the second storage system identifier 22003,and the identifier registered in the second storage area identifiercoincide with the identifier in the first storage system 400 containedin the pair freeing request, the identifier of the first storage area,the identifier in the second storage system 400, and the identifier inthe second storage area among the entries registered in the pairmanagement table 2200 stored in the first storage system 400.

Next, the pair deleting program 15000 refers to the pair managementtable 2200 stored in the first storage system 400 identified by theidentifier of the first storage system 400 contained in the pair freeingrequest. Then, the pair deleting program 15000 judges whether a storagearea other than the second storage area that composes the pair with thefirst storage area specified by the pair freeing request and that isspecified by the pair freeing request exists in Step 15030. It should benoted that the pair deleting program 15000 obtains the pair managementtable 2200 stored in the first storage system 400 and stores the pairmanagement table 2200 in the memory 306 in the case of referring to thepair management table 2200 stored in the first storage system 400.

When it is judged in the process of Step 15030 that there exists astorage area other than the second storage area that composes the pairwith the first storage area specified by the pair freeing request andthat is specified by the pair freeing request, the process advances toStep 15060.

When it is judged in the process of Step 15030 that there exists nostorage area other than the second storage area that composes the pairwith the first storage area specified by the pair freeing request andthat is specified by the pair freeing request, the pair deleting program15000 refers to the storage area allocation management table 2100 storedin the first storage system 400 identified by the identifier of thefirst storage system 400 contained in the pair freeing request. Then,the pair deleting program 15000 judges whether there exists a computer200 allocated to the first storage area specified in the pair freeingrequest in Step 15040. It should be noted that the pair deleting program15000 obtains the storage area allocation management table 2100 storedin the first storage system 400 and stores the storage area allocationmanagement table 2100 to the memory 306 in the case of referring to thestorage area allocation management table 2100 stored in the firststorage system 400.

To be specific, the pair deleting program 15000 judges whether theidentifier of the host computer 200 is registered in the computeridentifier 21003 of an entry in which the identifier registered in thestorage area identifier 21002 coincides with the identifier of the firststorage area contained in the pair freeing request among entriesregistered in the storage area allocation management table 2100 to bereferred.

When it is judged in the process of Step 15040 that there exists thehost computer 200 allocated to the first storage area specified by thepair freeing request, the process advances to a process of Step 15060.

When it is judged in the process of Step 15040 that there exists nocomputer 200 allocated to the first storage area specified by the pairfreeing request, there exists no computer 200 allocated to the firststorage area. In other words, there exists no computer 200 that shouldbe permitted to control the first storage area. Accordingly, the pairdeleting program 15000 deletes the entry in which the identifierregistered in the control target storage area identifier 23002 coincideswith the first storage area contained in the pair freeing request amongthe entries registered in the control computer management table 2300stored in the first storage system 400 identified by the identifier ofthe first storage system 400 contained in the pair freeing request inStep 15050.

Next, the pair deleting program 15000 refers to the pair managementtable 2200 stored in the second storage system 400 identified by theidentifier of the second storage system 400 contained in the pairfreeing request. Then, the pair deleting program 15000 judges whether astorage area other than the first storage area that composes the pairwith the second storage area specified by the pair freeing request andthat is specified by the pair freeing request exists in Step 15060. Itshould be noted that the pair deleting program 15000 obtains the pairmanagement table 2200 stored in the second storage system 400 and storesthe pair management table 2200 in the memory 306 in the case ofreferring to the pair management table 2200 stored in the second storagesystem 400.

When it is judged in the process of Step 15060 that there exists astorage area other than the first storage area that composes the pairwith the second storage area specified by the pair freeing request andthat is specified by the pair freeing request, the process of the pairdeleting program 15000 ends in Step 15090.

When it is judged in the process of Step 15060 that there exists nostorage area other than the first storage area that composes the pairwith the second storage area specified by the pair freeing request andthat is specified by the pair freeing request, the pair deleting program15000 refers to the storage area allocation management table 2100 storedin the second storage system 400 identified by the identifier of thesecond storage system 400 contained in the pair freeing request. Then,the pair deleting program 15000 judges whether there exists a computer200 allocated to the second storage area specified in the pair freeingrequest in Step 15070. It should be noted that the pair deleting program15000 obtains the storage area allocation management table 2100 storedin the second storage system 400 and stores the storage area allocationmanagement table 2100 to the memory 306 in the case of referring to thestorage area allocation management table 2100 stored in the secondstorage system 400.

To be specific, the pair deleting program 15000 judges whether theidentifier of the host computer 200 is registered in the computeridentifier 21003 of an entry in which the identifier registered in thestorage area identifier 21002 coincides with the identifier of thesecond storage area contained in the pair freeing request among entriesregistered in the storage area allocation management table 2100 to bereferred.

When it is judged in the process of Step 15070 that there exists thehost computer 200 allocated to the second storage area specified by thepair freeing request, the pair deleting program 15000 ends in Step15090.

When it is judged in the process of Step 15070 that there exists nocomputer 200 allocated to the second storage area specified by the pairfreeing request, there exists no computer 200 allocated to the secondstorage area. In other words, there exists no computer 200 that shouldbe permitted to control the second storage area. Accordingly, the pairdeleting program 15000 deletes the entry in which the identifierregistered in the control target storage area identifier 23002 coincideswith the second storage area contained in the pair freeing request amongthe entries registered in the control computer management table 2300stored in the second storage system 400 identified by the identifier ofthe second storage system 400 contained in the pair freeing request inStep 15080 and ends in Step 15090.

According to this invention, when the host computer 200 that provides aservice, the administrator allocates a storage area set in the storagesystem 400 to the host computer 200 to be added by using the storagemanagement computer 300. Accordingly, computers permitted to control thestorage area allocated to the added host computer 200 is limited to hostcomputers 200 that provide the same service with the added host computer200. When the host computer is to be deleted from the service, theadministrator also frees the relationship of allocation between the hostcomputer 200 to be deleted and the storage area allocated to the hostcomputer 200 to be deleted by using the storage management computer 300.Accordingly, computers, permitted to control the storage area, becomeunable to control the storage area allocated to the host computer 200 tobe deleted.

In other words, the control computer management table 2300 stored in thestorage system 400 is updated when the configuration is changed throughthe use of the storage management computer 300. Accordingly, it becomesunnecessary for the administrator to manage the computers permitted tocontrol the storage area besides changing the configuration.Accordingly, it becomes easy for the administrator to change the hostcomputers 200 that compose the service.

The host computer 200 of this embodiment may be a blade server. Whenthere is a plurality of blade servers within one case, one blade servercorresponds to one computer 200.

The host computer 200 of this embodiment may be a virtual computerrealized by software on a physical computer. When there is a pluralityof virtual computers on one physical computer, one virtual computercorresponds to one host computer 200.

The two management computers of the service management computer 500 andthe storage management computer 300 exist in this embodiment, but theremay be one management computer. In this case, one management computerstores tables stored in the service management computer 500 and thestorage management computer 300 and executes processes that are to beexecuted by the service management computer 500 and the storagemanagement computer 300.

Second Embodiment

A second embodiment of this invention will be explained by using FIGS.21 and 22.

According to the second embodiment of this invention, an operationpermitted to a storage area set in the storage system 400 of the hostcomputer 200 is decided based on a role of the host computer 200 definedin accordance to a role-of-computer 11003 contained in the servicemanagement table 1100.

An access control table 2400 is stored in the control memory 440provided in the storage system 400, instead of the control computermanagement table 2300 of the first embodiment.

The access control table 2400 is also referred instead of the controlcomputer management table 2300 in the step of referring to the controlcomputer management table 2300 in the data input/output program 8000.

A computer role management table 3300 is also stored in the memory 306provided in the storage management computer 300. Further, instead of theprocess of newly adding an entry to the control computer managementtable 2300 in the processes of the control computer management tablecreating program 9000, the storage area allocating program 10000, thecommand device allocating program 12000, and the pair creating program14000 executed by the storage management computer 300, the entry isnewly added to the access control table 2400.

Further, instead of process of deleting a certain entry out of entriescontained in the control computer management table 2300 in the processesof the storage area unallocating program 11000, the command deviceunallocating program 13000, and the pair deleting program 15000 executedby the storage management computer 300, the certain entry is deleted outof the entries contained in the access control table 2400.

FIG. 21 is a table showing a configuration of the computer rolemanagement table 3300 according to the second embodiment of thisinvention.

The computer role management table 3300 contains a role-of-computer33001 and a permitted operation 33002.

Information indicating a role of a computer 200 is registered in therole-of-computer 33001. Information indicating permitted operations to astorage area of the host computer 200 is registered in the permittedoperation 33002.

The computer role management table 3300 shown in FIG. 21 shows that pairoperation is permitted as for the permitted operations to the storagearea of the host computer 200 that plays roles of backup and databaseand change of attribute is permitted as for the permitted operations tothe storage area of the host computer 200 that plays a role of archive.

To be specific, as for the host computer 200 that plays the role ofbackup, the pair operation is permitted to change the status of the pairstatus from “Sync” to “Split” and to backup snapshot data stored in thestorage area.

The host computer 200 that plays the role of database has a function toquiesce the database to execute coordinated backup of each data storedin the storage areas composing a pair. Then, in the host computer 200that plays the role of database, the pair operation is permitted tochange the pair status to “Split” at the timing when the database isquiesced.

In the host computer 200 that plays the role of archive, the change ofattribute to the storage area is permitted to change archived data toread-only data.

FIG. 22 is a table showing a configuration of the access control table2400 according to the second embodiment of this invention.

The access control table 2400 contains columns of a storage systemidentifier 24001, a control target storage area identifier 24002, acomputer identifier 24003, and a permitted operation 24004.

It should be noted that the functions of the storage system identifier24001, the control target storage area identifier 24002, and thecomputer identifier 24003 are the same as those in the control computermanagement table 2300 shown in FIG. 9, so the explanation will beomitted here.

Information indicating permitted operations to the storage area of thehost computer 200 is registered in the permitted operation 24004.

When an entry is added to the access control table 2400, the servicemanagement table 1100 is referred. Then, the information registered inthe role-of-computer 11003 contained in the service management table1100 is obtained. Then, the role-of-computer management table 3300 isreferred and information registered in the permitted operation 33002 ofan entry in which information registered in the role-of-computer 33001coincides with the obtained information registered in therole-of-computer 11003. Then, the obtained information registered in thepermitted operation 33002 is registered in the permitted operation 24004contained in the access control table 2400.

For example, database is registered in the role-of-computer 11003 of theserver 2 in the service management table 1100 shown in FIG. 5. Pairoperation is registered in the role-of-computer management table 3300corresponding to the database in the role-of-computer management table3300 shown in FIG. 21. Accordingly, pair operation is registered in thepermitted operation 24004 of the entry when the computer identifier24003 of the access control table 2400 shown in FIG. 22 is the server 2.

In the processes of the data input/output program 8000 executed by thestorage system 400 of the second embodiment of this invention, the datainput/output program 8000 judges whether information registered in thepermitted operation 24004 contained in the access control table 2400coincides with operation contained in a storage area control request ina process of Step 8070. When it is judged that the informationregistered in the permitted operation 24004 contained in the accesscontrol table 2400 coincides with the operation contained in the storagearea control request, the data input/output program 8000 controls thestorage area. When it is judged that the information registered in thepermitted operation 24004 contained in the access control table 2400does not coincide with the operation contained in the storage areacontrol request, the data input/output program 8000 replies rejection ofcontrol to storage area.

When the administrator changes the configuration of the storage system,the table for managing the computer that permits the control to thestorage area set in the storage system 400 is updated. Accordingly, theadministrator can limit the computer that controls the storage area ofthe storage system without directly updating the table for managing thecomputer that permits the control to the storage area of the storagesystem 400. Thus, it becomes possible to reduce the load of theadministrator in managing the storage and to suppress the increase ofthe cost for managing the storage.

While the present invention has been described in detail and pictoriallyin the accompanying drawings, the present invention is not limited tosuch detail but covers various obvious modifications and equivalentarrangements, which fall within the purview of the appended claims.

1. A computer system, comprising: a host computer; at least one storagesystem coupled to the host computer; and a management computer capableof accessing the host computer and the storage system; wherein: the hostcomputer has a first processor for carrying out arithmetic operationsand a first memory connected to the first processor, and the firstmemory stores programs for providing a service, the first processor isconfigured to: provide the service by executing the programs; andaccess, by using a data input/output request, a first type storage areaas a command device provided by the storage system for changing aconfiguration of a second type storage area provided by the storagesystem, and wherein further: the at least one storage system has asecond processor for carrying out arithmetic operations, a second memoryconnected to the second processor, the first type storage area as thecommand device and the second type storage area for storing datarequested to be inputted from the host computer, the second memorystores first management information for managing the host computer thatis permitted to change the configuration of the second type storage areain the storage system by accessing the first type storage area as thecommand device, the second processor is configured to: permit or denythe host computer to change the configuration of the second type storagearea in the storage system based on the first management informationafter receiving the data input/output request, the management computerhas a third processor for carrying out arithmetic operations and a thirdmemory connected to the third processor, the third memory stores servicemanagement information including information indicating a role of thehost computer in a service provided by the host computer; and the thirdprocessor is configured to: judge whether the host computer is permittedto change the configuration of the second type storage area based on therole of the host computer in the service management information; andset, when it is judged that the host computer is permitted to change theconfiguration of the second type storage area, the host computer in thefirst management information.
 2. The computer system according to claim1, wherein: the third memory further stores second managementinformation for managing a relationship between the host computer, thesecond type storage area and the first type storage area as the commanddevice, and third management information for managing a type of serviceprovided by the host computer that is permitted to change theconfiguration of the second type storage area in the storage system, thethird management information including the service managementinformation, the second memory stores the second management information,the computer system further comprises a service management computer formanaging a service provided by the host computer, the service managementcomputer has a fourth processor for carrying out arithmetic operationsand a fourth memory connected to the fourth processor for storing thethird management information, and the third processor is furtherconfigured to: obtain the third management information stored in thefourth memory; obtain the second management information stored in thesecond memory; and store the obtained second and third managementinformation in the third memory.
 3. The computer system according toclaim 1, wherein the third memory further stores second managementinformation for managing a relationship between the host computer, thesecond type storage area and the first type storage area as the commanddevice, and third management information for managing a type of serviceprovided by the host computer that is permitted to change theconfiguration of the second type storage area in the storage system, thethird management information including the service managementinformation, and the third processor is further configured to: judge,when a function for permitting the host computer to change theconfiguration of the second type storage area is introduced into thecomputer system, whether the host computer is permitted to change theconfiguration of the second type storage area based on correspondencebetween the second and the third management information; and create thefirst information based on the judgment.
 4. The computer systemaccording to claim 1, wherein the third memory further stores secondmanagement information for managing a relationship between the hostcomputer, the second type storage area and the first type storage areaas the command device, and third management information for managing atype of service provided by the host computer that is permitted tochange the configuration of the second type storage area in the storagesystem, the third management information including the servicemanagement information, and the third processor is further configuredto: judge, when a configuration of the storage system is changed,whether the host computer is permitted to change the configuration ofthe second type storage area based on correspondence between the secondand the third management information; and update the first managementinformation based on the judgment.
 5. The computer system according toclaim 1, wherein the third processor is further configured to judgewhether the host computer is permitted to perform a specified operationon the second type storage area based on the role of the host computerin the service management information; and wherein the specifiedoperation is at least one of changing a copy pair status of the secondtype storage area and changing a read or write attribute of the secondtype storage area.
 6. The computer system according to claim 1, whereinthe third processor is further configured to judge whether the hostcomputer is permitted to perform a specified operation on the secondtype storage area based on the role of the host computer in the servicemanagement information; and wherein the second memory stores thespecified operation in an access control table.
 7. The computer systemaccording to claim 6, wherein the second processor is further configuredto permit or deny the host computer to perform the specified operationon the second type storage area based on whether the data input/outputrequest contains an operation that is stored in the access controltable.
 8. A storage management computer, comprising: a processor forcarrying out arithmetic operations; a memory connected to the processor;and an interface coupled to at least one storage system and a hostcomputer, the host computer accesses a first type storage area providedin the storage system for changing a configuration of a second typestorage area provided in the storage system, the storage system permitsor denies the host computer to change the configuration of the secondtype storage area in the storage system based on first managementinformation, which is permitted to change the configuration of thesecond type storage area in the storage system by accessing the firsttype storage area, wherein: the memory stores service managementinformation including information indicating a role of the host computerin a service provided by the host computer; and the processor isconfigured to: judge whether the host computer is permitted to changethe configuration of the second type storage area based on the role ofthe host computer in the service management information; and set, whenit is judged that the host computer is permitted to change theconfiguration of the second type storage area, the host computer in thefirst management information.
 9. The storage management computeraccording to claim 8, wherein: the memory further stores secondmanagement information for managing a relationship between the hostcomputer, the second type storage area and the first type storage area,and third management information for managing a type of service providedby the host computer, the third management information including theservice management information, the interface further couples to aservice management computer for managing a service provided by the hostcomputer, the service management computer stores the third managementinformation, and the processor is further configured to: obtain thethird management information stored in the service management computervia the interface; obtain the second management information stored inthe storage system via the interface; and store the obtained second andthird management information in the memory.
 10. The storage managementcomputer according to claim 8, wherein: the memory further stores secondmanagement information for managing a relationship between the hostcomputer, the second type storage area and the first type storage area,and third management information for managing a type of service providedby the host computer, the third management information including theservice management information, and the processor is further configuredto: judge whether the host computer is permitted to change theconfiguration of the second type storage area based on correspondencebetween the second management information and the third managementinformation when a function of allowing the host computer to change theconfiguration of the second type storage area is introduced into thestorage system; and create the first management information based on thejudgment.
 11. The storage management computer according to claim 8,wherein: the memory further stores second management information formanaging a relationship between the host computer, the second typestorage area and the first type storage area, and third managementinformation for managing a type of service provided by the hostcomputer, the third management information including the servicemanagement information, and the processor is further configured to:judge whether the host computer is permitted to change the configurationof the second type storage area based on correspondence between thesecond management information and the third management information whena configuration of the storage system is changed; and update the firstmanagement information based on the judgment.
 12. The storage managementcomputer according to claim 8, wherein the processor is furtherconfigured to judge whether the host computer is permitted to perform aspecified operation on the second type storage area based on the role ofthe host computer in the service management information; and wherein thespecified operation is at least one of changing a copy pair status ofthe second type storage area and changing a read or write attribute ofthe second type storage area.
 13. The storage management computeraccording to claim 8, wherein the processor is further configured tojudge whether the host computer is permitted to perform a specifiedoperation on the second type storage area based on the role of the hostcomputer in the service management information; and wherein the memorystores the specified operation in an access control table.
 14. Thestorage management computer according to claim 13, wherein the storagesystem permits or denies the host computer to perform the specifiedoperation on the second type storage area based on whether a datainput/output request from the host computer contains an operation thatis stored in the access control table.
 15. A first managementinformation setting method for setting first management information in acomputer system including a host computer, at least one storage systemcoupled to the host computer and having both a first type storage areaas a command device and a second type storage area for storing datainputted from the host computer, and a management computer which canaccess the host computer and the storage system, the host computerhaving a first processor for carrying out arithmetic operations and afirst memory connected to the first processor, the storage system havinga second processor for carrying out arithmetic operations, a secondmemory connected to the second processor, the first type storage area asthe command device, and the second type storage area for storing datarequested to be inputted from the host computer, the management computerhaving a third processor for carrying out arithmetic operations and athird memory connected to the third processor, the first managementinformation setting method comprising: storing, by the managementcomputer, service management information including informationindicating a role of the host computer in a service provided by the hostcomputer; judging, by the management computer, whether the host computeris permitted to change a configuration of the second type storage areabased on the role of the host computer in the service managementinformation; setting, by the management computer, when it is judged thatthe host computer is permitted to change the configuration of the secondtype storage area, the first management information for managing thehost computer, which is permitted to change the configuration of thesecond type storage area in the storage system by accessing the firsttype storage area, storing, by the storage system, the first managementinformation; accessing, by the host computer, the first type storagearea in the storage system to change the configuration of the secondtype storage area in the storage system; and permitting or denying thehost computer to change the configuration of the second type storagearea in the storage system based on the first management information.16. The first management information setting method according to claim15, wherein: the computer system further includes a service managementcomputer having a fourth processor for carrying out arithmeticoperations and a fourth memory connected to the fourth processor, formanaging services provided by the host computer; and the method furthercomprises: storing, by the management computer, second managementinformation for managing a relationship between the host computer, thesecond type storage area and the first type storage area, and thirdmanagement information for managing a type of service provided by thehost computer, the third management information including the servicemanagement information, storing, by the storage system, the secondmanagement information; storing, by the service management computer, thethird management information; obtaining, by the management computer, thethird management information stored in the service management computer;obtaining, by the management computer, the second management informationstored in the storage system; and storing, by the management computer,the obtained second and third management information.
 17. The firstmanagement information setting method according to claim 15, furthercomprising: storing, by the management computer, second managementinformation for managing a relationship between the host computer, thesecond type storage area and the first type storage area, and thirdmanagement information for managing a type of service provided by thehost computer, the third management information including the servicemanagement information; judging, by the management computer, when afunction for permitting the host computer to change the configuration ofthe second type storage area is introduced to the storage system,whether the host computer is permitted to change the configuration ofthe second type storage area based on correspondence between the secondmanagement information and the third management information; andcreating, by the management computer, the first management informationbased on the judgment.
 18. The first management information settingmethod according to claim 15, further comprising: storing, by themanagement computer, second management information for managing arelationship between the host computer, the second type storage area andthe first type storage area, and third management information formanaging a type of service provided by the host computer, the thirdmanagement information including the service management information,judging, by the management computer, in case of which a configuration ofthe storage system is changed, whether the host computer is permitted tochange the configuration of the second type storage area based oncorrespondence between the second and third management information; andupdating, by the management computer, the first management informationbased on the judgment.
 19. The first management information settingmethod according to claim 15, further comprising: judging, by themanagement computer, whether the host computer is permitted to perform aspecified operation on the second type storage area based on the role ofthe host computer in the service management information; and storing, bythe storage system, the specified operation in an access control table,wherein the specified operation is at least one of changing a copy pairstatus of the second type storage area and changing a read or writeattribute of the second type storage area.
 20. The first managementinformation setting method according to claim 19, wherein the step ofpermitting or denying is performed by the second processor, and includespermitting or denying the host computer to perform the specifiedoperation on the second type storage area based on whether a datainput/output request from the host computer contains an operation thatis stored in the access control table.